CVE-2021-30835: vulnerability in Apple tvOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.1%
This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, iTunes 12.12 for Windows, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected products
Apple · iOS and iPadOSApple · iTunes for WindowsApple · Security Update - CatalinaApple · tvOSApple · watchOSRelated CVEs — Apple tvOS
In the same product, most dangerous first.
References
http://seclists.org/fulldisclosure/2021/Oct/61http://seclists.org/fulldisclosure/2021/Oct/62http://seclists.org/fulldisclosure/2021/Oct/63https://support.apple.com/en-us/HT212805https://support.apple.com/en-us/HT212814https://support.apple.com/en-us/HT212815https://support.apple.com/en-us/HT212817https://support.apple.com/en-us/HT212819https://support.apple.com/kb/HT212804https://support.apple.com/kb/HT212953